Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/A58AAD5EB02A11F1BBEF72A8CE1D38B0.roa
File:                     A58AAD5EB02A11F1BBEF72A8CE1D38B0.roa (raw, json)
Hash identifier:          IoEQwxvrrVHBpVPR446a/dDQ5kBhfiEUzRqqxCgjeC4=
Subject key identifier:   4E:5F:D7:7A:40:C8:3E:DF:98:4C:C8:46:CA:14:79:00:A6:F7:2B:D3
Certificate issuer:       /CN=F366CF6BAF/serialNumber=EBB09DF7463A875CBE2860FC931E3DE374E28FC2
Certificate serial:       02
Authority key identifier: EB:B0:9D:F7:46:3A:87:5C:BE:28:60:FC:93:1E:3D:E3:74:E2:8F:C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/67Cd90Y6h1y-KGD8kx4943Tij8I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/A58AAD5EB02A11F1BBEF72A8CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 10:54:24 +0000
ROA not before:           Mon 14 Sep 2026 10:54:20 +0000
ROA not after:            Sun 14 Sep 2036 10:54:20 +0000
asID:                     328868
IP address blocks:        102.219.240.0/24 maxlen: 24
                          102.219.241.0/24 maxlen: 24
                          102.219.242.0/24 maxlen: 24
                          102.219.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/67Cd90Y6h1y-KGD8kx4943Tij8I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CF6BAF, serialNumber=EBB09DF7463A875CBE2860FC931E3DE374E28FC2
        Validity
            Not Before: Sep 14 10:54:20 2026 GMT
            Not After : Sep 14 10:54:20 2036 GMT
        Subject: CN=6aa7d260-69bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:65:1a:e0:75:20:ee:12:62:c5:0b:2e:e6:
                    3e:13:ab:5b:03:6e:b9:b3:a1:f7:e2:3b:39:55:c1:
                    c9:38:b5:9f:b9:c0:f1:fd:3a:94:a5:da:74:15:e2:
                    2c:4c:e3:df:d4:f3:59:f3:44:f5:ec:8e:25:31:da:
                    e7:1b:af:32:d9:cc:0d:86:fd:df:a4:c1:4d:e1:38:
                    40:28:83:ca:5c:15:43:92:ad:1e:8b:11:43:c1:75:
                    fa:b6:cd:dd:ee:b2:e6:cd:35:e8:5f:1d:bc:28:68:
                    88:e3:6c:89:14:c5:91:6a:61:98:4c:c0:08:7b:ad:
                    2f:51:59:88:c8:01:f3:d3:27:38:06:78:4a:9f:17:
                    05:91:de:e0:61:28:2d:c6:43:59:b2:e9:75:90:98:
                    b2:a0:32:39:c0:02:65:24:89:e9:fa:52:1c:3b:d3:
                    bf:99:7d:a2:1b:6a:0a:c1:2c:70:e9:35:e9:5e:05:
                    21:ba:41:23:40:97:53:b5:c8:56:9f:36:cc:e8:5d:
                    66:7f:a7:ff:b1:57:1d:72:b0:2d:d5:a3:5a:65:87:
                    d5:56:79:35:d6:86:21:fc:d3:d2:f7:74:f5:a6:54:
                    55:01:d4:cf:75:8c:c4:f6:41:66:ab:70:33:d8:52:
                    21:50:da:bf:e4:e1:19:77:4a:b7:2b:68:78:f6:c3:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5F:D7:7A:40:C8:3E:DF:98:4C:C8:46:CA:14:79:00:A6:F7:2B:D3
            X509v3 Authority Key Identifier:
                keyid:EB:B0:9D:F7:46:3A:87:5C:BE:28:60:FC:93:1E:3D:E3:74:E2:8F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/67Cd90Y6h1y-KGD8kx4943Tij8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/A58AAD5EB02A11F1BBEF72A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:7b:96:99:51:51:b0:b5:aa:29:0e:52:8f:03:19:af:cb:
         7a:b7:1c:02:ed:9b:34:84:e5:8c:ea:39:13:1f:d2:1b:46:ca:
         33:57:6d:60:e9:ee:81:f6:4f:03:ca:fe:bf:dc:9f:44:4f:8f:
         b6:c9:95:d7:1a:66:43:4d:26:12:ee:fc:4c:bc:ae:61:2a:b5:
         d4:43:e0:50:c4:28:46:1e:b9:34:00:60:ff:61:22:7f:84:27:
         67:28:82:c6:55:af:60:5f:a2:10:6a:0d:6a:7b:2e:6a:02:25:
         5d:f7:52:9b:8a:bd:94:a6:e1:dd:e1:69:b0:08:13:2a:85:ab:
         2c:8c:fc:48:36:55:62:1d:2e:ec:15:da:e8:70:93:e9:26:dd:
         16:12:61:08:41:44:97:d0:2f:14:46:1f:97:78:4d:7c:83:e9:
         f8:40:c1:92:c0:b8:b4:a1:5e:49:59:18:2c:47:76:71:82:4d:
         6b:b0:dc:26:98:e5:66:91:7d:92:01:ce:59:c5:ed:b1:4d:5c:
         b6:e4:a1:23:87:ec:55:e7:34:73:96:70:b7:ca:a6:b6:e6:f8:
         74:7a:cd:fb:c7:f3:a4:13:8d:09:3a:06:71:3f:c3:c0:89:69:
         7b:bd:25:a8:7c:e2:47:bd:39:d2:f5:6e:a0:bc:71:6e:65:c7:
         0a:54:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----